17957 matches found
Design/Logic Flaw
The verify function in the Stark Bank Python ECDSA library aka starkbank-escada or ecdsa-python before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...
Design/Logic Flaw
The verify function in the Stark Bank Java ECDSA library ecdsa-java 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...
Design/Logic Flaw
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...
Design/Logic Flaw
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...
Design/Logic Flaw
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...
RLSA-2021:4256 Moderate: graphviz security update
Graphviz is open-source graph-visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and ...
graphviz security update
An update is available for graphviz. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Graphviz is open-source graph-visualization software. Graph visualization is...
Moderate: graphviz security update
Graphviz is open-source graph-visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and ...
Red Hat Enterprise Linux code-related vulnerabilities
Red Hat Enterprise Linux is a Linux operating system for enterprise users from Red Hat, Inc. A code issue vulnerability exists in Red Hat Enterprise Linux that arises from an improper design or implementation of a network system or product code development process...
Design/Logic Flaw
The Squaretype WordPress theme before 3.0.4 allows unauthenticated users to manipulate the queryvars used to retrieve the posts to display in one of its REST endpoint, without any validation. As a result, private and scheduled posts could be retrieved via a crafted request...
Design/Logic Flaw
Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them...
Design/Logic Flaw
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard...
Design/Logic Flaw
ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...
Design/Logic Flaw
An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component aka the server-side implementation of Barrier and barrierc by sending long TCP messages...
Bootstrap-Table has an unspecified vulnerability
Bootstrap-Table is an open source extension table from the individual developers of China Wenzhixin that integrates with some of the most widely used Css frameworks. bootstrap-table has a security vulnerability that stems from improper design or implementation during the development of code for a...
Zydis security vulnerabilities
Zydis is an open source x86/x86-64 disassembly library from the Zyantific team.A security vulnerability exists in Zydis, which stems from an improper design or implementation during the development of code for a networked system or product. No detailed vulnerability details are currently availabl...
neoan3-template security vulnerability
Neoan3-Template is a minimal template engine for Neoan3. A security vulnerability exists in neoan3-template that arises from improper design or implementation during code development for a networked system or product...
PT-2021-7087
Name of the Vulnerable Software and Affected Versions Autodesk Design Review affected versions not specified Description The issue is related to a buffer overflow in memory when parsing TGA files, which can lead to memory corruption. This can be exploited by a remote attacker using a specially...
PT-2021-7093 · Autodesk · Autodesk Design Review
Name of the Vulnerable Software and Affected Versions: Autodesk Design Review affected versions not specified Description: The issue is related to a buffer overflow vulnerability when processing DWF files, which could allow a remote attacker to execute arbitrary code in the context of the current...